プロジェクト

全般

プロフィール

Vote #78177

未完了

Activity shows issues and text of issues which should not

Admin Redmine さんが約2年前に追加. 約2年前に更新.

ステータス:
Needs feedback
優先度:
高め
担当者:
-
カテゴリ:
Security_51
対象バージョン:
-
開始日:
2022/05/09
期日:
進捗率:

0%

予定工数:
category_id:
51
version_id:
0
issue_org_id:
24915
author_id:
186807
assigned_to_id:
0
comments:
3
status_id:
10
tracker_id:
1
plus1:
0
affected_version:
closed_on:
affected_version_id:
122
ステータス-->[Needs feedback]

説明

If as user only allowed to see your issues (Issues assigned or created by user) and you click on a different member of the project from the Project overview side.

  • You will see all the tickets assigned to that user and some of the content of the tickets as well.
  • If you click on a ticket from the activity you will get 403 Forbidden.

This may be applicable on other kind of activities.


journals

Please describe more details and see [[submissions]].
--------------------------------------------------------------------------------

--------------------------------------------------------------------------------
I could not reproduce the problem with 3.4.6.devel.17468. All activities on a user's profile page are visible issues for the current user.
--------------------------------------------------------------------------------


related_issues

relates,Needs feedback,22120,Issues are visible in Issue List but not in Issue Detail

Admin Redmine さんが約2年前に更新

  • カテゴリSecurity_51 にセット

他の形式にエクスポート: Atom PDF

いいね!0
いいね!0